retail.electricity.aws.nichigas.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 01:cd:06:01:d1:11:02:4d:6e:f8:c2:64:61:61:de:b0 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=retail.electricity.aws.nichigas.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:cd:06:01:d1:11:02:4d:6e:f8:c2:64:61:61:de:b0
Serial Number (int): 2393770690173269625762622433979915952
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ac:fb:e9:60:67:44:3c:53:61:b4:77:5a:aa:67:c4:e2:90:e4:2f:b8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 75:d4:d1:dc:3d:69:24:0b:5f:0c:55:84:17:4d:a9:80:14:88:76:6a
Fingerprint (sha256): 5d:f4:39:62:f3:3e:19:7c:b8:01:d1:76:6c:fd:59:49:7c:bb:a5:e8:cb:9a:a7:9a:fc:54:1b:78:2c:34:43:57

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate retail.electricity.aws.nichigas.co.jp

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for retail.electricity.aws.nichigas.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

retail.electricity.aws.nichigas.co.jp
*.retail.electricity.aws.nichigas.co.jp

Other certificates including the domain name nichigas.co.jp

(limited to 100 certificates)
retail.threet.electricity.aws.nichigas.co.jp
callback.tea.nichigas.co.jp
retail.electricity.aws.nichigas.co.jp
*.map.ops.nichigas.co.jp
koji.nichigas.co.jp
*.ops.nichigas.co.jp
zabbix.back.tea.nichigas.co.jp
*.oss.nichigas.co.jp
pint.cloud.back.tea.nichigas.co.jp
*.internal-apigw.nichigas.co.jp
erex.cloud.back.tea.nichigas.co.jp
bi.aws.nichigas.co.jp
*.covid19.eip.nichigas.co.jp
*.ops.nichigas.co.jp
*.postcode.nichigas.co.jp
*.dev.nichigas.co.jp
*.oni.nichigas.co.jp
*.internal-apigw.nichigas.co.jp
fnj2.cloud.back.tea.nichigas.co.jp
payment-converter.aws.nichigas.co.jp
log.back.tea.nichigas.co.jp
*.stg.nichigas.co.jp
campaign.nichigas.co.jp
*.nbs.nichigas.co.jp
n12h.oni.nichigas.co.jp
fnj.vpn.retail.tea.nichigas.co.jp
htb.cloud.back.tea.nichigas.co.jp
manage.aws.nichigas.co.jp
www.nichigas.co.jp
bi.aws.nichigas.co.jp
*.dev.nichigas.co.jp
*.ops.nichigas.co.jp
weborder.nichigas.co.jp
order.electricity.aws.nichigas.co.jp
aggregation.aws.nichigas.co.jp
*.oni.nichigas.co.jp
lp.myapp.stg.nichigas.co.jp
emi.cloud.back.tea.nichigas.co.jp
postcode.nichigas.co.jp
api.dps.nichigas.co.jp
weborder.tea.nichigas.co.jp
framgia.retail.threet.electricity.aws.nichigas.co.jp
api.private.nichigas.co.jp
framgia.retail.electricity.aws.nichigas.co.jp
login.nichigas.co.jp
nte.cloud.back.tea.nichigas.co.jp
campaign.nichigas.co.jp
www.nichigas.co.jp
erex.cloud.back.tea.nichigas.co.jp
framgia.retail.electricity.aws.nichigas.co.jp
campaign.nichigas.co.jp
weborder.nichigas.co.jp
*.nichigas.co.jp
tki.cloud.back.tea.nichigas.co.jp
*.uxp-int.nf.nichigas.co.jp
weborder.nichigas.co.jp
campaign.nichigas.co.jp
recall.nichigas.co.jp
retail.threet.electricity.aws.nichigas.co.jp
*.gasappliance.nichigas.co.jp
cmn.cloud.back.tea.nichigas.co.jp
*.citygas.nichigas.co.jp
retail.tea.nichigas.co.jp
api.private.nichigas.co.jp
fbit.cloud.back.tea.nichigas.co.jp
recall.nichigas.co.jp
www.weborder.nichigas.co.jp
fnj.vpn.cloud.back.tea.nichigas.co.jp
www.nichigas.co.jp
payment-converter.aws.nichigas.co.jp
cis.nichigas.co.jp
*.voucher.nichigas.co.jp
*.cis.nichigas.co.jp
pay.nichigas.co.jp
aggregation.aws.nichigas.co.jp
citygas.nichigas.co.jp
chuod.cloud.back.tea.nichigas.co.jp
cis.nichigas.co.jp
campaign.nichigas.co.jp
pint.cloud.back.tea.nichigas.co.jp
*.stg.nichigas.co.jp
emi.cloud.back.tea.nichigas.co.jp
*.stg.nichigas.co.jp
my.nichigas.co.jp
*.n12h.oni.nichigas.co.jp
fnj.cloud.back.tea.nichigas.co.jp
xoomenergy.cloud.back.tea.nichigas.co.jp
retail.electricity.aws.nichigas.co.jp
xoomenergy.cloud.back.tea.nichigas.co.jp
manage.aws.nichigas.co.jp
login.nichigas.co.jp
fnj.vpn.retail.tea.nichigas.co.jp
recall.nichigas.co.jp
*.nf.nichigas.co.jp
ict-covid19.eip.nichigas.co.jp
lp.my.stg.nichigas.co.jp
fbit.cloud.back.tea.nichigas.co.jp
*.ops.nichigas.co.jp
weborder.nichigas.co.jp
*.apigw.nichigas.co.jp

Certificate

The complete raw certificate details for retail.electricity.aws.nichigas.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLGRBm46YmuOH97B8TsR
O3tpgZnaSUKCfgP8rteHc5vygeDoigg443ykNS+41gnwQq+LpFF+z2PggTh5mTp9
BbVkLNkZO+yN7T5vpRS5vnRHLoPwNiVz3+DtultyaHiL7/ML9zulzg/Crr3iktYR
5zg09aIsgkA5TQoWbOuCKq8PzjYKFZIh1WunCqV4OCVpdTk34/bNeD+goXnpJJ5F
8TmuQYCetKn3UjVmm7QTxiwk8iGtQyzPhe5fWmIGCka9LgMVKWPXvK1nOxAsbT4s
Xz3u8PNo9oaZvHIZI0pVYJnRb2v6bul3R0OH7CnLMQIwUqJ02Ohguylyoy+TyDeC
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2393770690173269625762622433979915952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'retail.electricity.aws.nichigas.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21800549760922924555033775313072498364509681816464731772376083831532841952680534451225677535831154191908006361841352182975554281828930261707631288052008778453381819029779536925279535878751145945583926054416829331552439933464558809025221265153861534226884058505011538891767298560601624624049668063442831533474177914388899484598421342602378098152500902899144741878213761472300525169536815736169516785665025440210512300732885788220059640225099555562388356181874328957781622418382538693500598932700451864586815318935049886976837360377673097720539477264368908659792140773835242719830634484920811740471755337743008917848643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							acfbe96067443c5361b4775aaa67c4e290e42fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.electricity.aws.nichigas.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.retail.electricity.aws.nichigas.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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